100% found this document useful (1 vote)
97 views

Administración de Redes y Comunicaciones. Redes Escalables Cabrera Espinoza, Rodrigo. C20

The document describes configuring a WPA2 Enterprise WLAN on a wireless LAN controller. It includes objectives like configuring a new VLAN interface, WLAN, DHCP scope, SNMP settings, and RADIUS server authentication for the WLAN. The scenario is that the WLC will be used in a larger enterprise, so WPA2-PSK is not appropriate due to scaling issues, requiring the use of WPA2-Enterprise with a RADIUS server instead.

Uploaded by

Inversiones Cima
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
100% found this document useful (1 vote)
97 views

Administración de Redes y Comunicaciones. Redes Escalables Cabrera Espinoza, Rodrigo. C20

The document describes configuring a WPA2 Enterprise WLAN on a wireless LAN controller. It includes objectives like configuring a new VLAN interface, WLAN, DHCP scope, SNMP settings, and RADIUS server authentication for the WLAN. The scenario is that the WLC will be used in a larger enterprise, so WPA2-PSK is not appropriate due to scaling issues, requiring the use of WPA2-Enterprise with a RADIUS server instead.

Uploaded by

Inversiones Cima
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 30

Especialidad:

Administración de Redes y Comunicaciones.


Curso:
Redes Escalables
Alumno:
Cabrera Espinoza, Rodrigo.
Clase:
C20
Instructor:
Alvarez Coloma, Jonathan Vicente
Arequipa - Perú
2020
Packet Tracer - Configure a Basic WLAN on the WLC
Addressing Table

Device Interface IP Address

R-1 G/0/0 172.31.1.1/24


R-1

R-1 G0/0/1.5 192.168.5.1/24

G0/0/1.200 192.168.200.1/24

SW-1 VLAN 200 192.168.200.100/24

LAP-1 G0 DHCP

WLC-1 Management 192.168.200.254/24

Server NIC 172.31.1.254/24

Admin PC NIC 192.168.200.200/24

Wireless Host Wireless NIC DHCP

Objectives
In this lab, you will explore some of the features of a wireless LAN controller. You will create a
new WLAN on the controller and implement security on that LAN. Then you will configure a
wireless host to connect to the new WLAN through an AP that is under the control of the WLC.
Finally, you will verify connectivity.
• Connect to a wireless LAN controller GUI.
• Explain some of the information that is available on the WLC Monitor screen.
• Configure a WLAN on a wireless LAN controller.
• Implement security on a WLAN.
• Configure a wireless host to connect to a wireless LAN.

Background / Scenario
An organization is centralizing control of their wireless LAN by replacing their standalone access
points with lightweight access points (LAP) and a wireless LAN controller (WLC). You will be
leading this project and you want to become familiar with the WLC and any potential challenges
that may occur during the project. You will configure a WLC by adding a new wireless network
and securing it with WPA-2 PSK security. To test the configuration, you will connect a laptop to
the WLAN and ping devices on the network.
Instructions Part 1: Monitor the WLC
Wait until STP has converged on the network. You can click the Packet Tracer Fast Forward Time
button to speed up the process. Continue when all link lights are green.
a. Go the desktop of Admin PC and open a browser. Enter the management IP address of
WLC-1 from the addressing table into the address bar. You must specify the HTTPS
protocol.

Packet Tracer - Configure a Basic WLAN on the WLC

b. Click Login and enter these credentials: User Name: admin, Password: Cisco123. After a
short delay, you will see the WLC Monitor Summary screen.

Note: Packet Tracer does not support the initial dashboard that has been demonstrated in this
module. c.
Scroll through the Monitor Summary screen.

What can be learned from this screen?


Información de estado de administración, PoE, tipo de certificado, etc.
Is the WLC connected to an AP? yes

c. Click Detail next to the All APs entry in the Access Point Summary section of the page.
What
information can you find about APs on the All APs screen?
Aquí se puede ver que el Wireless _ LAN tiene ahora un cliente el uso de
sus servicios

Part 2: Create a Wireless LAN


Now you will create a new wireless LAN on the WLC. You will configure the settings that are
required for hosts to join the WLAN.

Step 1: Create and enable the WLAN.


a. Click WLANs in the WLC menu bar. Locate the dropdown box in the upper right had corner of
the WLANs screen. It will say Create New. Click Go to create a new WLAN.

b. Enter the Profile Name of the new WLAN. Use the profile name Floor 2 Employees. Assign an
SSID of SSID-5 to the WLAN. Hosts will need to use this SSID to join the network.
c. Select the ID for the WLAN. This value is a label that will be used to identify the WLAN is other
displays. Select a value of 5 to keep it consistent with the VLAN number and SSID. This is not
a requirement but it helps with understanding the topology.

d. Click Apply so that the settings go into effect.


e. Now that the WLAN has been created, you can configure features of the network. Click
Enabled to make the WLAN functional. It is a common mistake to accidentally skip this step.
f. Choose the VLAN interface that will be used for the WLAN. The WLC will use this interface for
user traffic on the network. Click the drop-down box for Interface/Interface Group (G). Select
the WLAN-5 interface.
This interface was previously configured on the WLC for this activity.

g. Click the Advanced tab.


h. Scroll down to the FlexConnect portion of the page. Click to enable FlexConnect Local
Switching and FlexConnect Local Auth.
i. Click Apply to enable the new WLAN. If you forget to do this, the WLAN will not operate.

Step 2: Secure the WLAN.


The new WLAN currently has no security in place. This WLAN will initially use WPA2-PSK security.
In another activity, you will configure the WLAN to use WPA2-Enterprise, a much better solution
for larger wireless networks.
Packet Tracer - Configure a Basic WLAN on the WLC
a. In the WLANs Edit screen for the Floor 2 Employees WLAN, click the Security tab. Under the
Layer 2 tab, select WPA+WPA2 from the Layer 2 Security drop down box. This will reveal the
WPA parameters.
b. Click the checkbox next to WPA2 Policy. This will reveal additional security settings. Under
Authentication Key Management, enable PSK.
c. Now you can enter the pre-shared key that will be used by hosts to join the WLAN. Use
Cisco123 as the passphrase.
d. Click Apply to save these settings.
Note: It is not a good practice to reuse passwords when configuring security. We have reused
passwords in this activity to simplify configuration.

Step 3: Verify the Settings


a. After Applying the configuration, click Question: Back. This will take you back to the WLANs screen.

What information about the new WLAN is available on this screen?


b. If you click the WLAN ID, you will be taken to the WLANs Edit screen. Use this to verify and
change the details of the settings.

Part 3: Connect a Host to the WLAN

Step 1: Connect to the network and verify connectivity.


a. Go to the desktop of Wireless Host and click the PC Wireless tile.

b. Click the Connect tab. After a brief delay you should see the SSID for the WLAN appear in the
table of wireless network names. Select the SSID-5 network and click the Connect button.
c. Enter the pre-shared key that you configured for the WLAN and click Connect.
d. Click the Link Information tab. You should see a message that confirms that you have
successfully connected to the access point. You should also see a wireless wave in the
topology showing the connection to LAP-1.
e. Click the More Information button to see details about the connection.

f. Close the PC Wireless app and open the IP Configuration app. Verify that Wireless Host has
received a non-APIPA IP address over DHCP. If not, click the Fast Forward Time button a few
times.
g. From Wireless Host, ping the WLAN default gateway and the Server to verify that the laptop
has full connectivity.
End of document
Packet Tracer - Configure a WPA2 Enterprise WLAN on the WLC
Addressing Table

Device Interface IP Address

R1 G0/0/0.5 192.168.5.1/24
R1

R1 G0/0/0.200 192.168.200.1/24

G0/0/1 172.31.1.1/24

SW1 VLAN 200 192.168.200.100/24

LAP-1 G0 DHCP

WLC-1 Management 192.168.200.254/24

RADIUS/SNMP Server NIC 172.31.1.254/24

Admin PC NIC 192.168.200.200/24

Objectives
In this activity, you will configure a new WLAN on a wireless LAN controller (WLC), including the
VLAN interface that it will use. You will configure the WLAN to use a RADIUS server and WPA2-
Enterprise to authenticate users. You will also configure the WLC to use an SNMP server.
• Configure a new VLAN interface on a WLC.
• Configure a new WLAN on a WLC.
• Configure a new scope on the WLC internal DHCP server.
• Configure the WLC with SNMP settings.
• Configure the WLC to user a RADIUS server to authenticate WLAN users.
• Secure a WLAN with WPA2-Enterprise.
• Connect hosts to the new WLC.

Background / Scenario
You have already configured and tested the WLC with an existing WLAN. You configured WPA2-
PSK for that WLAN because it was to be used in a smaller business. You have been asked to
configure and test a WLC topology that will be used in a larger enterprise. You know that WPA2-
PSK does not scale well and is not appropriate to use in an enterprise network. This new
topology will use a RADIUS server and
WPA2Enterprise to authenticate WLAN users. This allows administration of the user accounts
from a central location and provides enhanced security and transparency because each account
has its own username and password. In addition, user activity is logged on the server.
In this lab, you will create a new VLAN interface, use that interface to create a new WLAN, and
secure that WLAN with WPA2-Enterprise. You will also configure the WLC to use the enterprise
RADIUS server to authenticate users. In addition, you will configure the WLC to use a SNMP
server.

Instructions Part 1: Create a new WLAN

Step 1: Create a new VLAN interface.


Each WLAN requires a virtual interface on the WLC. These interfaces are known as dynamic
interfaces. The virtual interface is assigned a VLAN ID and traffic that uses the interface will be
tagged as VLAN traffic. This is why connections between the APs, the WLC, and the router are
over trunk ports. For the traffic from multiple WLANs to be transported through the network,
traffic for the WLAN VLANs must be trunked.
a. Open the browser from the desktop of Admin PC. Connect to the IP address of the WLC over
HTTPS.
b. Login with the username admin and password Cisco123.
c. Click the Controller menu and then click Interfaces from the menu on the left. You will see the
default virtual interface and the management interface to which you are connected.
d. Click the New button in the upper right-hand corner of the page. You may need to scroll the
page to the right to see it.
e. Enter the name of the new interface. We will call it WLAN-5. Configure the VLAN ID as 5. This
is the VLAN that will carry traffic for the WLAN that we create later. Click Apply. This leads to a
configuration screen for the VLAN interface.
f. First, configure the interface to use physical port number 1. Multiple VLAN interfaces can use
the same physical port because the physical interfaces are like dedicated trunk ports.
g. Address the interface as follows:
IP Address: 192.168.5.254
Netmask: 255.255.255.0
Gateway: 192.168.5.1
Primary DHCP server: 192.168.5.1
User traffic for the WLAN that uses this VLAN interface will be on the 192.168.5.0/24 network.
The default gateway is the address of an interface on router R-1. A DHCP pool has been
configured on the router. The address that we configure here for DHCP tells the WLC to
forward all DHCP requests that it receives from hosts on the WLAN to the DHCP server on the
router.
h. Be sure to click Apply to enact your changes and click OK to respond to the warning
message. Click Save Configuration so that your configuration will be in effect when the WLC
restarts.

Step 2: Configure the WLC to use a RADIUS server.


WPA2-Enterprise uses an external RADIUS server to authenticate WLAN users. Individual user
accounts with unique usernames and passwords can be configured on the RADIUS server.
Before the WLC can use the services of the RADIUS server, the WLC must be configured with the
server address. a. Click the Security menu on the WLC.
b. Click the New button and enter the IP address of the RADIUS server in the Server IP Address
field.
c. The RADIUS server will authenticate the WLC before it will allow the WLC to access the user
account information that is on the server. This requires a shared secret value. Use Cisco123.
Confirm the shared secret and click Apply.
Note: It is not a good practice to reuse passwords. This activity reuses passwords only to
make the activity easier for you to complete and review.
Step 3: Create a new WLAN.
Create a New WLAN. Use the newly created VLAN interface for the new WLAN.
a. Click the WLANs entry in the menu bar. Locate the dropdown box in the upper right-had
corner of the WLANs screen. It will say Create New. Click Go to create a new WLAN.
b. Enter the Profile Name of the new WLAN. Use the profile name Floor 2 Employees. Assign an
SSID of SSID-5 to the WLAN. Change the ID drop down to 5. Hosts will need to use this SSID
to join the network. When you are done, click Apply to accept your settings.
Note: The ID is an arbitrary value that is used as a label for the WLAN. In this case, we
configured it as 5 to be consistent with VLAN for the WLAN. It could be any available value.
c. Click Apply so that the settings go into effect.
d. Now that the WLAN has been created you can configure features of the network. Click
Enabled to make the WLAN functional. It is a common mistake to accidentally skip this step.
e. Choose the VLAN interface that will be used for the new WLAN. The WLC will use this
interface for user traffic on the network. Click the drop-down box for Interface/Interface Group
(G). Select the interface that we created in Step 1.
f. Go to the Advanced tab. Scroll to FlexConnect section of the interface.
g. Click to enable FlexConnect Local Switching and FlexConnect Local Auth.
h. Click Apply to enable the new WLAN. If you forget to do this, the WLAN will not operate.

Step 4: Configure WLAN security.


Instead of WPA2-PSK, we will configure the new WLAN to use WPA2-Enterprise.
a. Click the WLAN ID of the newly created WLAN to continue configuring it, if necessary.
b. Click the Security tab. Under the Layer 2 tab, select WPA+WPA2 from the drop-down box.
c. Under WPA+WPA2 Parameters, enable WPA2 Policy. Click 802.1X under Authentication Key
Management. This tells the WLC to use the 802.1X protocol to authenticate users externally.
d. Click the AAA Servers tab. Open the drop-down next to Server 1 in the Authentication Servers
column and select the server that we configured in Step 2.
e. Click Apply to enact this configuration. You have now configured the WLC to use the RADIUS
sever to authenticate users that attempt to connect to the WLAN.
Part 2: Configure a DHCP Scope and SNMP

Step 1: Configure a DHCP Scope.


The WLC offers its own internal DHCP server. Cisco recommends that the WLAN DHCP server
not be used for high-volume DHCP services, such as that required by larger user WLANs.
However, in smaller networks, the DHCP server can be used to provide IP addresses to LAPs
that are connected to the wired management network. In this step, we will configure a DHCP
scope on the WLC and use it to address LAP1. a. Should be connected to the WLC GUI from
Admin PC.
b. Click the Question: Controller menu and then click Interfaces.

c. Click the Questions: management Interface. Record its addressing information here.
IP address:
Type your answers here.
Netmask:
Type your answers here.
Gateway:
Type your answers here.
Primary DHCP server:

d. We want the WLC to use its own DHCP sever to provide addressing to devices on the wireless
management network, such as lightweight APs. For this reason, enter the IP address of the
WLC management interface as the primary DHCP server address. Click Apply. Click OK to
acknowledge any warning messages that appear.
e. In the left-hand menu, expand the Internal DHCP Server section. Click DHCP Scope.
f. To create a DHCP scope, click the New… button.
g. Name the scope Wired Management. You will configure this DHCP scope to provide
addresses to the wired infrastructure network that connects the Admin PC, WLC-1, and LAP-1.
h. Click Apply to create the new DHCP scope.
i. Click the new scope in the DHCP Scopes table to configure addressing information for the
scope. Enter the following information.
Pool Start Address: 192.168.200.240
Pool End Address: 192.168.200.249
Status: Enabled
Provide the values for Network, Netmask, and Default Routers from the information you
gathered in Step 1c.

j. Click Apply to activate the configuration. Click Save Configuration in the upper-right-hand
corner of the WLC interface to save your work so that it is available when the WLC restarts.
The internal DHCP server will now provide an address to LAP-1 after a brief delay.

When LAP-1 has its IP address, the CAPWAP tunnel will be established and LAP-1 will be able to
provide access to the Floor 2 Employees (SSID-5) WLAN. If you move the mouse over LAP-1 in
the topology, you should see its IP address, the status of the CAPWAP tunnel, and the WLAN that
LAP-1 is providing access to.

Step 2: Configure SNMP


a. Click the Management menu in the WLC GUI and expand the entry for SNMP in the left-hand
menu. b.
Click Trap Receivers and then New…
c. Enter the community string as WLAN_SNMP and the IP address of the server at 172.31.1.254. d.
Click Apply to finish the configuration.

Part 3: Connect Hosts to the Network

Step 1: Configure a host to connect to the enterprise network.


In the Packet Tracer PC Wireless client app, you must configure a WLAN Profile in order to attach
to a WPA2-Enterprise WLAN.
a. Click Wireless Host and open the PC Wireless app.
b. Click the Profiles tab and then click New to create a new profile. Name the profile WLC NET.
c. Highlight the Wireless Network Name for the WLAN that we created earlier and click Advanced
Setup.
d. Verify that the SSID for the wireless LAN is present and then click Next. Wireless Host should
see SSID5. If it does not, move the mouse over LAP-1 to verify that it is communicating with
the WLC. The popup box should indicate that LAP-1 is aware of SSID-5. If it is not, check the
WLC configuration. You can also manually enter the SSID.
e. Verify that the DHCP network setting is selected and click Next.
f. In the Security drop down box, select WPA2-Enterprise. Click Next.
g. Enter login name user1 and the password User1Pass and click Next. User1Pass

h. Verify the Profile Settings and click Save.


i. Select the WLC NET profile and click the Connect to Network button. After a brief delay, you
should see the Wireless Host connect to LAP-1. You can click the Fast Forward Time button to
speed up the process if it seems to be taking too long.

j. Confirm that Wireless Host has connected to the WLAN. Wireless Host should receive an IP
address from the DHCP server that is configured for hosts on R1. The address will be in the
192.168.5.0/24 network.
You may need to click the Fast Forward Time button speed up the process.
a. Close the PC Wireless app.
b. Open a command prompt and confirm that Wireless Host laptop has obtained an IP address
from the
WLAN network. Question:

What network should the address be in? Explain.


Type your answers here.
c. Ping the default gateway, SW1, and the RADIUS server. Success indicates full connectivity
within this topology.
Reflection Questions
1. The RADIUS server uses a dual authentication mechanism. What two things are authenticated by
the RADIUS server? Why do think this is necessary?
Por que es importante proteger las tablas de nombres de usuario del servidor de radio y
contraseñas de intrusos de dispositivos no autorizados
2. What are the advantages of WPA2-Enterprise over WPA2-PSK?
• Elimina los riesgos de seguridad de las contraseñas compartidas.
• Los métodos de autenticación se pueden extender a la red cableada
• as VLAN se pueden asignar dinámicamente
• Admite protección de acceso a la red (NAP)
• Con WPA2-PKS es más fácil para el intruso de amenaza robar la contraseña y obtener
acceso a la red
Packet Tracer - WLAN Configuration
Addressing Table

Device Interface IP Address

Home Wireless Router Internet DHCP


Home Wireless Router

LAN 192.168.6.1/27

RTR-1 G0/0/0.2 192.168.2.1/24

RTR-1
G0/0/0.5 192.168.5.1/24

G0/0/0.100 192.168.100.1/24
RTR-1

G0/0/1 10.6.0.1/24
RTR-1

SW1 VLAN 200 192.168.100.100/24

LAP-1 G0 DHCP

WLC-1 Management 192.168.100.254/24

RADIUS Server NIC 10.6.0.254/24

Home Admin NIC DHCP

Enterprise Admin NIC 192.168.100.200/24

Web Server NIC 203.0.113.78/24

DNS Server NIC 10.100.100.252

Laptop NIC DHCP

Tablet PC Wireless0 DHCP

Smartphone Wireless0 DHCP


Wireless Host 1 Wireless0 DHCP

Wireless Host 2 Wireless0 DHCP

WLAN Information
WLAN SSID Authentication Username Password

Home Network HomeSSID WPA2-Personal N/A Cisco123

WLAN VLAN 2 SSID-2 WPA-2 Personal N/A Cisco123

WLAN VLAN 5 SSID-5 WPA-2 Enterprise userWLAN5 userW5pass


Note: It is not a good practice to reuse passwords as is done in this activity. Passwords have
been reused to make it easier to work through the tasks.

Objectives
In this activity, you will configure both a wireless home router and a WLC-based network. You will
implement both WPA2-PSK and WPA2-Enterprise security.
• Configure a home router to provide Wi-Fi connectivity to a variety of devices.
• Configure WPA2-PSK security on a home router.
• Configure interfaces on a WLC.
• Configure WLANs on a WLC.
• Configure WPA2-PSK security on a WLAN and connect hosts to WLAN.
• Configure WPA2-Enteprise on a WLAN and connect hosts to the WLAN.
• Verify connectivity WLAN connectivity.

Background / Scenario
You will apply your WLAN skills and knowledge by configuring a home wireless router and an
enterprise WLC. You will implement both WPA2-PSK and WPA2-Enterprise security. Finally, you
will connect hosts to each WLAN and verify connectivity.

Instructions
Part 1: Configure a Home Wireless Router.
You are installing a new home wireless router at a friend’s house. You will need to change
settings on the router to enhance security and meet your friend’s requirements.

Step 1: Change DHCP settings.


a. Open the Home Wireless Router GUI and change the router IP and DHCP settings according to
the information in the Addressing Table.
b. Permit a maximum of 20 addresses to be issued by the router.
c. Configure the DHCP server to start with IP address .3 of the LAN network.
d. Configure the internet interface of the router to receive its IP Question: address over DHCP.

Verify the address.


e. Configure the static DNS server to the address in the Addressing Table.

Status

a. The network will use the 2.4GHz Wireless LAN interface. Configure the interface with the SSID
shown in the Wireless LAN information table.
b. Use channel 6.
c. Be sure that all wireless hosts in the home will be able to see the SSID.

Step 3: Configure security.


a. Configure wireless LAN security. Use WPA2 Personal and the passphrase shown in the
Wireless LAN information table.
b. Secure the router by changing the default password to the value shown in the Wireless LAN
information table.
Step 4: Connect clients to the network.
a. Open the PC Wireless app on the desktop of the laptop and configure the client to connect to
the network.

b. Open the Config tab on the Tablet PC and Smartphone and configure the wireless interfaces
to connect to the wireless network.
c. Verify connectivity. The hosts should be able to ping each other and the web server. They
should also be able to reach the web server URL.
SE REALIZO EL PING DE LAPTOP A SMARPHONE

SE REALIZO PING A LA TABLET


PING DE LAPTOP AL WEB SERVER

PING A WWW.NETACAD.PT
Part 2: Configure a WLC Controller Network
Configure the wireless LAN controller with two WLANs. One WLAN will use WPA2-PSK
authentication. The other WLAN will use WPA2-Enterprise authentication. You will also configure
the WLC to use an SNMP server and configure a DHCP scope that will be used by the wireless
management network.

Step 1: Configure VLAN interfaces.


a. From the Enterprise Admin, navigate to the WLC-1 management interface via a web browser.
To log into WLC-1, use admin as the username and Cisco123 as the password.

Name: WLAN 2
VLAN Identifier: 2
Port Number: 1
Interface IP Address: 192.168.2.254
Netmask: 255.255.255.0
Gateway: RTR-1 G0/0/0.2 address
Primary DHCP Server: Gateway address
c. Configure an interface for the second WLAN.
Name: WLAN 5
VLAN Identifier: 5

Port Number: 1
Interface IP Address: 192.168.5.254
Netmask: 255.255.255.0
Gateway: RTR-1 interface G0/0/0.5 address Primary
DHCP Server: Gateway address

Step 2: Configure a DHCP scope for the wireless management network.


Configure and enable an internal DHCP scope as follows:
Scope Name: management
Pool Start Address: 192.168.100.235
Pool End Address: 192.168.100.245
Network: 192.168.100.0
Netmask: 255.255.255.0
Default Routers: 192.168.100.1

Step 3: Configure the WLC with external server addresses.


a. Configure the RADIUS server information as follows:
Sever Index: 1
Sever Address: 10.6.0.254
Shared Secret: RadiusPW
b. Configure the WLC to send logs information to an SNMP server.
Community Name: WLAN IP
Address: 10.6.0.254
Step 4: Create the WLANs.
a. Create the first WLAN: Profile Name: Wireless VLAN ¡Error! Marcador no definido.
WLAN SSID: SSID 26
Interface: WLAN 26
ID:Security: 802.1x - WPA2-Enterprise ¡Error! Marcador no definido.

Profile Name: Wireless VLAN 2


WLAN SSID: SSID-2
ID: 2
Interface: WLAN 2
Security: WPA2-PSK
Passphrase: Cisco123
Under the Advanced tab, go to the FlexConnect section. Enable FlexConnect Local Switching
and FlexConnect Local Auth.
b. Create the second WLAN:
Configure the WLAN to use the RADIUS server for authentication.
Make the FlexConnect settings as was done in Step 4a.

Step 5: Configure the hosts to connect to the WLANs.


Use the desktop PC Wireless app to configure the hosts as follows: a.
Wireless Host 1 should connect to Wireless VLAN 2.
c. Wireless Host 2 should connect to Wireless VLAN 5 using the credentials in the WLAN
information table.
Test connectivity between the wireless hosts and the Web Server by ping and URL.

Ping A WIRELLES HOST 2

PING A SERVIDOR WEB Y A SU NOMBRE DEL DOMINIO


CONCLUSIONES:

• Logré comprender que para poder crear y habilitar es necesario hacer clic en WLAN en la barra de
menú de WLC en donde se crea una nueva WLAN y se selecciona el ID para la WLAN que se usa
para identificar la WLAN en otras pantallas.
• Logré comprender que para configurar un enrutador domestico es necesario cambiar la configuración
del router para mejorar la seguridad y cumplir los requisitos.
• Al realizar el laboratorio vi que usamos la interfaz WLC para ver una imagen general de la información
y rendimiento del sistema de AP así como acceder a configuraciones avanzadas y configurar un WLAN
• Logre comprender que se realizó la configuración de la WLAN para usar un servidor RADIUS y WPA2-
Enterprise para la autenticación de los usuarios.
• Observé que para configurar un alcance de DHCP y SNMP primeramente se configura un alcance
DHCP en donde la WLC ofrece su propio servidor DHCP interno , pero si en redes más pequeñas el
servidor DHCP puede utilizarse para proporcionar direcciones IP a los LAP que estén conectados a
la red de gestión cableada.

You might also like